Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0997. PoCs published by suid.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in FTP servers that support file conversion via external programs like tar. By uploading a maliciously crafted filename starting with a dash, an attacker can pass arbitrary arguments to the underlying program, leading to remote command execution.
Description
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
Exploits (1)
This exploit leverages a command injection vulnerability in FTP servers that support file conversion via external programs like tar. By uploading a maliciously crafted filename starting with a dash, an attacker can pass arbitrary arguments to the underlying program, leading to remote command execution.